EUVD-2007-2977

Malware in sbrugna...

CVE-2007-2985

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheaplogin cookie value to the administrator's username, which can be used to 1 obtain sensitive information, including the administrator password, via settings.php or 2 upload and execute arbitrary PHP code via an updatedoc...

CVE-2007-2985

Pheap 2.0 allows remote attackers to bypass authentication by setting a pheaplogin cookie value to the administrator's username, which can be used to 1 obtain sensitive information, including the administrator password, via settings.php or 2 upload and execute arbitrary PHP code via an updatedoc...

CVE-2007-2985

CVE-2007-2985 affects Pheap 2.0. An attacker can bypass authentication by setting the pheap_login cookie to the administrator’s username, enabling (1) access to sensitive info, including the admin password via settings.php and (2) upload/execute arbitrary PHP code via the update_doc action in edi...

Pheap 2.0 - config.php Pheap_Login Authentication Bypass

Pheap 2.0 - config.php PheapLogin Authentication Bypass source: https://www.securityfocus.com/bid/24227/info Pheap is prone to an authentication-bypass vulnerability due to a design error. An attacker can exploit this vulnerability to bypass authentication and execute arbitrary commands in the...

Pheap 2.0 - 'config.php' Pheap_Login Authentication Bypass

source: https://www.securityfocus.com/bid/24227/info Pheap is prone to an authentication-bypass vulnerability due to a design error. An attacker can exploit this vulnerability to bypass authentication and execute arbitrary commands in the context of the site administrator. !/usr/bin/php -q -d...

Pheap 2.0 Admin Bypass / Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user verification routine used in most of the files is: include"lib/config.php"; if $COOKIE'pheaplogin' != $username header"Location: login.php"; else CONTINUE EXECUTING CODE So basically it's saying "I...

Pheap 2.0 Admin Bypass / Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================== Pheap 2.0 Admin Bypass / Remote Code Execution Exploit ====================================================== !/usr/bin/php -q -d shortopentag=on ?php / Explanation: The user...